CmdID

CmdID / Files

lpksetup.exe

Language Pack Installer file version info

Program on Windows 7 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real lpksetup.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionLanguage Pack Installer

7 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\lpksetup.exe · signed by Microsoft Windows

ab16ee2a50b5324453e7190cda6d98f0e8f6271b04d3907be933ebbc2ccc7c8a

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\lpksetup.exe · signed by Microsoft Windows

0fefbd2235c5eb2babcedecaa3f798cf632a580aa4d73d023d3d24d8365da562

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\lpksetup.exe · signed by Microsoft Windows

cb3cbeaaff7c07b044f70177e2899a87e80840d177238eb7dd25b8d9e20bef22

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\lpksetup.exe · signed by Microsoft Windows

1ed8ba67c06a52912c38732077165d59a9e843a256058260dd3958c74b5c558e

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\lpksetup.exe · signed by Microsoft Windows

5a04255b366666cb669ca216e64c61463936363955d71cd86e6f04a3641b18c4

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\lpksetup.exe · signed by Microsoft Windows

d374dd6e68f5ca40b3a86b6e32946019daebd2e24a48cd43d0d01074cfe26681

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\lpksetup.exe · not signed

cb91ce75c73e7c24c2bb58b515c86dc4fcfae19d31ad3b4060418b8a479d7c8a

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.